Tenendo

BACKGROUND

Please describe your company and your position there.

I am CTO for a FinTech company which has launched it's own new mobile trading application.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Tenendo?

We were looking for an external security audit to meet regulatory and requirements for a reasonable price within our budget. The price gap between competitors was outrageous compared to Tenedo.

SOLUTION

How did you select this vendor and what were the deciding factors?

Tenedo were recommended to us by our other providers. During the initial communications Tenedo seemed very professional with their approach. Also pricing was a deciding factor, they were much more competitive and within our budget

Describe the project in detail and walk through the stages of the project.

They did their work great (won't go in too much tech details here). Preparations were quite detailed and well planned, we understood the whole process and how it will go. 

How many resources from the vendor's team worked with you, and what were their positions?

Exactly that: project manager security analyst 2 penetration testers

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

They have identified one critical flaw early and notified us ASAP, rather than waiting for full test to complete. Which allowed us to fix it (old depreciated product was still alive, had to kill it for good) Report itself was detailed and simple to understand.

How effective was the workflow between your team and theirs?

Communication was spot on during the tests themselves, at each stage we knew where we were. We communicated live via SLACK.

What did you find most impressive or unique about this company?

Professionals, doing what they do best. Price per performance ratio.

Are there any areas for improvement or something they could have done differently?

Not much to add here.

BACKGROUND

Please describe your company and your position there.

I'm the CTO and CSO of a healthcare IT and services company.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Tenendo?

We were looking for a vendor to perform our annual penetration testing that primary focuses on the web applications and APIs.

SOLUTION

How did you select this vendor and what were the deciding factors?

We rotate vendors yearly and after interviewing Tenendo and reviewing the proposal decided to give them a chance since they demonstrated competency in the area we needed. We also reference-checked them with a previous customer.

Describe the project in detail and walk through the stages of the project.

They submitted a proposal with the scope and methodology. After some initial preparation and setup, testing kicked off. We were in close communication with the lead pen tester throughout the project. After the assessment was complete, we received a report and a walkthrough, followed by support as we analyzed the report and retesting of the vulnerabilities after they addressed.

How many resources from the vendor's team worked with you, and what were their positions?

We worked with a lead pen tester and with the CEO to support the contracting and payment.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

They did a thorough job within the scope of the project and discovered several issues that have been lingering in our application for some time.

How effective was the workflow between your team and theirs?

They kept us updated throughout, including some real-time communication via Slack which was much appreciated. The project was executed on schedule.

What did you find most impressive or unique about this company?

We were impressed by their solid performance despite being a small and new vendor.

Are there any areas for improvement or something they could have done differently?

Streamline the payment process.

BACKGROUND

Please describe your company and your position there.

I am the CEO of AlleoChain Ltd, the company that provides blockchain-as-a-service solutions.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Tenendo?

We were looking for a cyber security company to perform an external security audit of AlleoChain, prior to the first commercial release of our product.

SOLUTION

How did you select this vendor and what were the deciding factors?

Tenendo reached out to us with a pitch email. We've reviewed their website, process, people, and responded with interest. The deciding factors were the experience of people in their team, and a clear and transparent process.

Describe the project in detail and walk through the stages of the project.

We had a couple of conference calls, describing the AlleoChain product. Tenendo performed an external security audit, using both automated and manual testing. They've identified several security issues, which they described in detail in the findings report, and a findings presentation conference call.

How many resources from the vendor's team worked with you, and what were their positions?

We interacted with 3 people altogether - CEO for business discussions, CFO for financials, and their technical lead on the project.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

Instead of reporting a billion irrelevant issues usually found with automated tools, Tenendo catered their findings for fewer, but more relevant issues, allowing us to focus on what is important to fix.

How effective was the workflow between your team and theirs?

Tenendo was a very efficient team to work with. They always communicate clearly, via channels preferred by the client (email, Slack, and Zoom in our case). They quickly respond to the inquires, and always keep us in the loop during the project progress.

What did you find most impressive or unique about this company?

Their communications are excellent. And their technical expertise is superb! They are also quite flexible, making it extremely easy to integrate their team into our own internal workflows.

Are there any areas for improvement or something they could have done differently?

Not really. Everything was top-notch!